Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250941	7.2	危険	maynard johnson	-	OProfile の utils/opcontrol における権限を取得される脆弱性	CWE-94 コード・インジェクション	CVE-2011-1760	2012-03-27 18:43	2011-06-9	Show	GitHub Exploit DB Packet Storm

250942	3.7	注意	Fedora Project	-	SSSD の krb5_save_ccname_done 関数におけるケルベロス認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-1758	2012-03-27 18:43	2011-05-26	Show	GitHub Exploit DB Packet Storm

250943	5	警告	brad fitzpatrick	-	DJabberd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1757	2012-03-27 18:43	2011-06-20	Show	GitHub Exploit DB Packet Storm

250944	5	警告	citadel	-	Citadel の modules/xmpp/serv_xmpp.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1756	2012-03-27 18:43	2011-06-20	Show	GitHub Exploit DB Packet Storm

250945	5	警告	jabberd 2.x project	-	jabberd2 におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1755	2012-03-27 18:43	2011-06-20	Show	GitHub Exploit DB Packet Storm

250946	5	警告	jabberd	-	jabberd におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1754	2012-03-27 18:43	2011-06-20	Show	GitHub Exploit DB Packet Storm

250947	5	警告	ProcessOne	-	ejabberd の expat_erl.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1753	2012-03-27 18:43	2011-06-1	Show	GitHub Exploit DB Packet Storm

250948	4.7	警告	Linux	-	Linux kernel の agp サブシステムにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1747	2012-03-27 18:43	2011-05-9	Show	GitHub Exploit DB Packet Storm

250949	5.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC Captiva eInput におけるサービス運用妨害の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1744	2012-03-27 18:43	2011-08-1	Show	GitHub Exploit DB Packet Storm

250950	4.3	警告	DELL EMC (旧 EMC Corporation)	-	EMC Captiva eInpu におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1743	2012-03-27 18:43	2011-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
258411	9.8	CRITICAL Network	muvikoscript	muviko	Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to login.php; the (2) season_id parameter to themes/flixer/aj…	CWE-89 SQL Injection	CVE-2017-17970	2024-11-21 12:19	2018-01-13	Show	GitHub Exploit DB Packet Storm

258412	5.3	MEDIUM Network	parity	browser	Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via the Parity web proxy engine (reusing the c…	CWE-346 Origin Validation Error	CVE-2017-18016	2024-11-21 12:19	2018-01-12	Show	GitHub Exploit DB Packet Storm

258413	9.8	CRITICAL Network	novosoft	handy_password	A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2017-17946	2024-11-21 12:19	2018-01-11	Show	GitHub Exploit DB Packet Storm

258414	6.1	MEDIUM Network	avantfax	avantfax	AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.	CWE-79 Cross-site Scripting	CVE-2017-18024	2024-11-21 12:19	2018-01-11	Show	GitHub Exploit DB Packet Storm

258415	6.1	MEDIUM Network	officetracker	officetracker	Office Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI.	CWE-79 Cross-site Scripting	CVE-2017-18023	2024-11-21 12:19	2018-01-11	Show	GitHub Exploit DB Packet Storm

258416	8.8	HIGH Network	redmine debian	redmine debian_linux	Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary comma…	NVD-CWE-noinfo	CVE-2017-18026	2024-11-21 12:19	2018-01-10	Show	GitHub Exploit DB Packet Storm

258417	9.8	CRITICAL Network	innotube	itguard_manager	cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning…	CWE-78 OS Command	CVE-2017-18025	2024-11-21 12:19	2018-01-9	Show	GitHub Exploit DB Packet Storm

258418	6.5	MEDIUM Network	imagemagick canonical	imagemagick ubuntu_linux	In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2017-18022	2024-11-21 12:19	2018-01-6	Show	GitHub Exploit DB Packet Storm

258419	9.8	CRITICAL Network	qtpass	qtpass	It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2017-18021	2024-11-21 12:19	2018-01-6	Show	GitHub Exploit DB Packet Storm

258420	8.4	HIGH Local	samsung	samsung_mobile	On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader because S Boot omits a size check during a copy of ramfs…	CWE-20 Improper Input Validation	CVE-2017-18020	2024-11-21 12:19	2018-01-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed